Session fails in each 30-60 minutes for every user including Admin

Hello,

I have installed nopCommerce on windows server and MSSQL 2008 with advanced services.

Session logs out after about 30s-5 minutes of idle time.

I couldn't solve the problem so it's the last option to know to problem and it's solutions. Please help me out of this.

http://mycomfort.in/
[email protected]; Passcode: admin


Thank You
Mrinal

take a look at this line on web.comfig file
<sessionState timeout="20" mode="InProc" cookieless="false"/>

Are you sure this code would work?? I guess, This is the solution !!! : )

what version of windows server do you have?

It is 2008 r2

so you can increase the amount of time in menute on this line
<sessionState timeout="20" mode="InProc" cookieless="false"/>
let me know if works

It dint work.. again asked to re login. Apart from this got a new kind of server error..

Error Message :-
"A potentially dangerous Request.Form value was detected from the client (ctl00$cph1$ctrlGlobalSettings$CommonSettingsTabs$pnlGoogleAnalytics$txtGoogleAnalyticsJS="<script type="text/j...")"

can you post your actual web.config file?

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <configSections>
    <section name="NopConfig" type="NopSolutions.NopCommerce.BusinessLogic.Configuration.NopConfig, Nop.BusinessLogic" requirePermission="false" />
    <section name="urlrewritingnet" type="UrlRewritingNet.Configuration.UrlRewriteSection, UrlRewritingNet.UrlRewriter" requirePermission="false" />
  </configSections>
  <appSettings>
    <add key="ChartImageHandler" value="storage=file;" />
    <add key="UseSSL" value="false" />
    <add key="SharedSSLUrl" value="" />
    <add key="NonSharedSSLUrl" value="" />
    <add key="GoogleMerchantID" value="" />
    <add key="GoogleMerchantKey" value="" />
    <add key="GoogleEnvironment" value="Sandbox" />
    <add key="GoogleAuthenticateCallback" value="True" />
    <add key="FCKeditor:BasePath" value="~/editors/fckeditor/" />
    <add key="FCKeditor:UserFilesPath" value="~/images/" />
    <add key="dependencyResolverTypeName" value="NopSolutions.NopCommerce.BusinessLogic.Infrastructure.UnityDependencyResolver, Nop.BusinessLogic" />
  </appSettings>
  <connectionStrings configSource="ConnectionStrings.config" />
  <urlrewritingnet configSource="UrlRewriting.config" />
  
  <system.web>
    
     <httpRuntime executionTimeout="3600" maxRequestLength="512000" requireRootedSaveAsPath="true" enable="true" />
    <customErrors mode="Off" defaultRedirect="errorpage.htm">
      <error statusCode="403" redirect="bannedaddress.htm" />
      <error statusCode="404" redirect="filenotfound.htm" />
    </customErrors>
    <compilation debug="false" targetFramework="4.0">
      <expressionBuilders>
        <add expressionPrefix="NopResources" type="NopSolutions.NopCommerce.BusinessLogic.Localization.NopResourceExpressionBuilder, Nop.BusinessLogic" />
      </expressionBuilders>
      <assemblies>
        <add assembly="System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
      </assemblies>
    </compilation>
    <authentication mode="Forms">
      <forms name="NOPCOMMERCE.AUTH" loginUrl="~/login.aspx" protection="All" timeout="43200" path="/" requireSSL="false" slidingExpiration="true" defaultUrl="~/default.aspx" enableCrossAppRedirects="false" />
    </authentication>
    <anonymousIdentification enabled="true" />
    <authorization>
      <allow users="*" />
    </authorization>
    <membership defaultProvider="NopMembershipSqlProvider" userIsOnlineTimeWindow="15">
      <providers>
        <add name="NopMembershipSqlProvider" type="NopSolutions.NopCommerce.BusinessLogic.Profile.StoreMembershipProvider, Nop.BusinessLogic" connectionStringName="NopSqlConnection" enablePasswordReset="true" requiresQuestionAndAnswer="false" applicationName="NopCommerce" requiresUniqueEmail="true" enablePasswordRetrieval="true" />
      </providers>
    </membership>
    <roleManager enabled="true" cacheRolesInCookie="false" defaultProvider="NopRoleManagerSqlProvider" cookieName=".NopCommerceRoles" cookiePath="/" cookieTimeout="30" cookieRequireSSL="false" cookieSlidingExpiration="true" createPersistentCookie="false" cookieProtection="All">
      <providers>
        <add name="NopRoleManagerSqlProvider" type="NopSolutions.NopCommerce.BusinessLogic.Profile.StoreRoleProvider, Nop.BusinessLogic" connectionStringName="NopSqlConnection" applicationName="NopCommerce" />
      </providers>
    </roleManager>
    <sessionState mode="InProc" timeout="720" cookieless="false"/>
    
    <siteMap defaultProvider="NopAdminXmlSiteMapProvider" enabled="true">
      <providers>
        <add name="NopAdminXmlSiteMapProvider" type="System.Web.XmlSiteMapProvider" siteMapFile="Administration/Admin.sitemap" />
      </providers>
    </siteMap>
    <pages theme="DarkOrange" validateRequest="false" enableEventValidation="false" viewStateEncryptionMode ="Never" controlRenderingCompatibilityVersion="3.5" clientIDMode="AutoID" enableViewStateMac="false">
      <namespaces>
        <add namespace="System.Collections.Generic" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Audit" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Audit.UsersOnline" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Categories" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Configuration.Settings" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Content.Blog" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Content.Forums" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Content.NewsManagement" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Content.Polls" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.CustomerManagement" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Directory" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Infrastructure" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Localization" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Manufacturers" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Measures" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Media" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Messages" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Orders" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Payment" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Products.Attributes" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Products.Specs" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Products" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Profile" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Promo.Affiliates" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Promo.Campaigns" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Promo.Discounts" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Security" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.SEO" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Shipping" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Tasks" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Tax" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Templates" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Utils" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Utils.Html" />
        <add namespace="NopSolutions.NopCommerce.BusinessLogic.Warehouses" />
        <add namespace="NopSolutions.NopCommerce.Common" />
        <add namespace="NopSolutions.NopCommerce.Common.Utils" />
        <add namespace="NopSolutions.NopCommerce.Common.Utils.Html" />
        <add namespace="NopSolutions.NopCommerce.Controls" />
        <add namespace="NopSolutions.NopCommerce.Controls.Payment.Validators" />
      </namespaces>
      <controls>
        <add tagPrefix="ajaxToolkit" namespace="AjaxControlToolkit" assembly="AjaxControlToolkit" />
        <add tagPrefix="nopCommerce" namespace="NopSolutions.NopCommerce.Controls" assembly="Nop.Controls" />
        <add tagPrefix="nopCommerce" namespace="NopSolutions.NopCommerce.Controls.Payment.Validators" assembly="Nop.Controls" />
      </controls>
    </pages>
    <httpHandlers>
      <add path="ChartImg.axd" verb="GET,HEAD,POST" type="System.Web.UI.DataVisualization.Charting.ChartHttpHandler, System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" validate="false" />
      <add verb="*" path="pricelist.csv" validate="false" type="NopSolutions.NopCommerce.BusinessLogic.ExportImport.PricelistHandler, Nop.BusinessLogic" />
    </httpHandlers>
    <httpModules>
      <add name="MembershipHttpModule" type="NopSolutions.NopCommerce.BusinessLogic.Profile.MembershipHttpModule, Nop.BusinessLogic" />
      <add name="UrlRewriteModule" type="UrlRewritingNet.Web.UrlRewriteModule, UrlRewritingNet.UrlRewriter" />
      <add name="BlacklistHttpModule" type="NopSolutions.NopCommerce.BusinessLogic.Security.BlacklistHttpModule, Nop.BusinessLogic" />      
    </httpModules>
  </system.web>
  <system.webServer>
    <validation validateIntegratedModeConfiguration="false" />
    <modules>
      <remove name="NopCommerceFilter" />
      <remove name="UrlRewriteModule" />
      <add name="MembershipHttpModule" preCondition="managedHandler" type="NopSolutions.NopCommerce.BusinessLogic.Profile.MembershipHttpModule, Nop.BusinessLogic" />
      <add name="UrlRewriteModule" preCondition="managedHandler" type="UrlRewritingNet.Web.UrlRewriteModule, UrlRewritingNet.UrlRewriter" />
      <add name="BlacklistHttpModule" preCondition="managedHandler" type="NopSolutions.NopCommerce.BusinessLogic.Security.BlacklistHttpModule, Nop.BusinessLogic" />
    </modules>
        <directoryBrowse enabled="false" />
        <defaultDocument>
            <files>
                <clear />
                <add value="index.php" />
                <add value="Default.htm" />
                <add value="Default.asp" />
                <add value="index.htm" />
                <add value="index.html" />
                <add value="iisstart.htm" />
                <add value="default.aspx" />
            </files>
        </defaultDocument>
  </system.webServer>
  <NopConfig>
    <SqlServer ConnectionStringName="NopSqlConnection" />
    <ScheduleTasks>
      <Thread seconds="60">
        <!--do NOT enable ClearCache task if you have enabled tracking online users-->
        <task name="ClearCache" type="NopSolutions.NopCommerce.BusinessLogic.Caching.ClearCacheTask, Nop.BusinessLogic" enabled="false" stopOnError="false" />
        <task name="PurgeOnlineUsers" type="NopSolutions.NopCommerce.BusinessLogic.Audit.UsersOnline.PurgeOnlineUsersTask, Nop.BusinessLogic" enabled="true" stopOnError="false" />
        <task name="Emails" type="NopSolutions.NopCommerce.BusinessLogic.Messages.SendQueuedMessagesTask, Nop.BusinessLogic" enabled="true" stopOnError="false" maxTries="5" />
        <task name="KeepAlive" type="NopSolutions.NopCommerce.BusinessLogic.Utils.KeepAliveTask, Nop.BusinessLogic" enabled="true" stopOnError="false" path="keepalive/ping.ashx" />
      </Thread>
      <Thread seconds="600">
        <task name="DeleteExpiredCustomerSessions" type="NopSolutions.NopCommerce.BusinessLogic.CustomerManagement.DeleteExpiredCustomerSessionsTask, Nop.BusinessLogic" enabled="true" stopOnError="false" deleteExpiredCustomerSessionsOlderThanMinutes="43200" />
        <task name="DeleteExpiredShoppingCarts" type="NopSolutions.NopCommerce.BusinessLogic.Orders.DeleteExpiredShoppingCartsTask, Nop.BusinessLogic" enabled="false" stopOnError="false" deleteExpiredShoppingCartsOlderThanMinutes="259200" />
      </Thread>
      <Thread seconds="60">
        <task name="UpdateExchangeRates" type="NopSolutions.NopCommerce.BusinessLogic.Directory.ExchangeRates.UpdateExchangeRateTask, Nop.BusinessLogic" enabled="true" stopOnError="false" />
      </Thread>
      <Thread seconds="3600">
        <task name="DatabaseMaintance" type="NopSolutions.NopCommerce.BusinessLogic.Maintenance.DatabaseMaintanceTask, Nop.BusinessLogic" enabled="false" stopOnError="false" />
      </Thread>
    </ScheduleTasks>
  </NopConfig>
</configuration>

ok, i see, your problem is on IIS, you must change your website timeout on the configuration property tab